×
cancel
Showing results for
Did you mean:
Highlighted
Level 9
Report Inappropriate Content
Message 1 of 3

Creating Network DLP Concept with expressions

Hello dear friends!

Can you help me to modify next Concepts. I have been added new concept to detect IIN ( Individual identification number).

Combination of 12 numbers. For example, 870103300941, where is 87/01/03 Date of Birth, 3 - gender and age,

Meaning of 12 figures of IIN

Consists of 4 parts:

First - six figures: two last figures of the year of birth, month and date of birth.

Second – one figure: gender of the person and age of his birth (for instance, man who was born the previous age will have code figure 3, representative of fair sex who was born this age will have code figure 6).

Third – four figures: sequence number of registration in the system.

Fourth – one figure: for control.

\d\d[0][1-9][1-2]\d[1-6]\d\d\d\d\d

\d\d[1][0-2][1-2]\d[1-6]\d\d\d\d\d

\d\d[0]\d[3][0-1][1-6]\d\d\d\d\d

\d\d[1][0-2][3][0-1][1-6]\d\d\d\d\d

\d\d[0][1-9][0][1-9][1-6]\d\d\d\d\d

\d\d[1][0-2][0][1-9][1-6]\d\d\d\d\d

2 Replies
Level 9
Report Inappropriate Content
Message 2 of 3

Re: Creating Network DLP Concept with expressions

But this expression do not working correctly.

How I need to correct if now this expressions finding incidents in any digits, with any length.

But I need just length with 12 digits.

Level 10
Report Inappropriate Content
Message 3 of 3

Re: Creating Network DLP Concept with expressions

Try creating a simple rule first.

ie.

\s\d\d\d\d\d\d[3]\d\d\d\d\d\s

\s\d\d\d\d\d\d[6]\d\d\d\d\d\s

That should work for what you want.

When that work tweak the part 1 to accomodate YYMMDD pattern.

• How-to: Endpoint Removal Tool
• Support: Endpoint Security
• eSupport: Policy Orchestrator
• Community Help Hub

New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

• Find Forum FAQs
• Learn How to Earn Badges